CVE-2022-42719
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inj…
Published Oct 13, 2022 · updated Oct 14, 2026 · linux linux kernel
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2022 · NIST NVD
Detected
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
Oct 14, 2026 · NIST NVD
Updated
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
Affected
- cpe debian/debian linux10.0
- cpe fedoraproject/fedora35
- cpe fedoraproject/fedora36
- cpe fedoraproject/fedora37
- cpe linux/linux kernelversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2022-42719
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2022-42719
30-day exploitation probability 1.4%
first.org - NIST NVDVulnerability recordCVE-2022-42719
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
nvd.nist.gov - Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/171005/Kernel-Live-Patch-Security-Notice-LNS-0091-1.html
Packet Storm link already published on the finding.
packetstormsecurity.com